Unverified50% confidenceFactExact time
When an agent simultaneously possesses the ability to execute sensitive operations and erase audit records, prompt injection attacks can cause damage without leaving any trace.
1
Sources
50%
Confidence
Long-term
Relevance
10/2/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIndirect prompt injection attacks plant hidden instructions within normal business data to induce Agents into executing unauthorized operations, representing a security risk at the semantic level rather than the code level.79% similarUnverifiedCommon prompt injection attack techniques include role hijacking, instruction override, context poisoning, and data exfiltration induction78% similarUnverified在具备工具调用能力的 Agentic 系统中，一次成功的提示注入可能导致数据泄露、恶意代码执行甚至供应链攻击78% similarUnverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为75% similarUnverifiedAPT attackers actively clear logs, forge timestamps, and leverage legitimate tools (i.e., Living off the Land) to evade detection.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/967240API
curl https://kongchang.com/api/v1/knowledge/claims/967240MCP
get_claim(id=967240)